Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa
File:                     f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa (raw, json)
Hash identifier:          8gHTFpLr+QdePdEPRnND7d+Jk7cTwTNUdski0N6li3Y=
Subject key identifier:   24:02:67:1E:0C:6F:27:D7:CD:14:4D:ED:0B:1D:98:B6:7D:5B:6C:74
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5BD72ED0D8D4E87CE9C4F0EA8DB9F6F4D647D4ED
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa
Signing time:             Mon 26 Oct 2026 04:20:57 +0000
ROA not before:           Mon 26 Oct 2026 04:20:57 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e000::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d7:2e:d0:d8:d4:e8:7c:e9:c4:f0:ea:8d:b9:f6:f4:d6:47:d4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 26 04:20:57 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=9896022a0f9f578025aa869515ea05dda81cd13ac4e6d47bd63ca42d444203ae, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e4:3e:bf:c7:48:ae:e6:aa:0b:98:a8:a9:15:
                    65:5f:02:6e:ed:e1:d0:9f:1d:7e:6a:84:36:d8:09:
                    85:98:07:4f:7c:27:a9:90:84:90:86:43:9c:29:9e:
                    3a:0b:a6:a1:10:0e:a7:5b:f1:fe:6f:8e:4b:06:95:
                    cd:33:95:e4:18:29:5a:a3:33:26:d0:b8:13:11:02:
                    b9:da:aa:be:7d:d7:a9:6c:44:80:a3:b1:0d:97:de:
                    0f:03:67:98:08:53:86:03:af:7b:c2:4e:43:29:df:
                    31:7d:21:f8:32:5c:7a:b0:2d:e4:94:00:80:88:c3:
                    54:03:2d:0f:21:33:0d:e9:25:27:ad:02:7e:a8:9b:
                    01:53:42:00:32:c0:6c:61:e3:6b:e9:36:ea:14:bc:
                    4d:8e:74:31:ba:85:d9:10:a9:14:ef:04:37:88:9c:
                    da:d8:79:6c:8b:81:54:00:e5:3a:0e:71:d4:6d:71:
                    e8:76:7a:d2:23:be:4d:7b:9d:77:a0:e8:3b:ab:04:
                    db:eb:50:cd:05:2d:fa:dc:c4:27:0a:60:61:3a:84:
                    79:95:d5:1d:dd:cf:b3:7f:c4:8a:7f:85:39:dd:07:
                    90:40:48:ac:7c:af:9c:65:20:8d:d2:15:89:b1:fc:
                    0a:9e:8f:f8:d6:22:2e:ed:9f:eb:0b:be:41:1f:62:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:02:67:1E:0C:6F:27:D7:CD:14:4D:ED:0B:1D:98:B6:7D:5B:6C:74
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e000::/42

    Signature Algorithm: sha256WithRSAEncryption
         0a:2a:97:0b:db:5b:9c:2f:41:5d:31:d1:dc:2b:ab:aa:a7:f1:
         9c:08:83:c5:d4:cb:e8:23:95:d3:7b:f1:83:97:4c:a8:6b:e5:
         f3:78:6b:ff:2d:fa:87:31:10:e8:77:66:38:58:b2:5d:83:5d:
         3b:55:96:aa:50:cf:50:2b:68:2a:67:ff:c5:99:d1:d7:b0:6a:
         fc:67:0e:45:91:8c:e8:6f:9e:c6:9b:a0:36:2e:4d:fb:ec:03:
         18:72:ba:6d:4b:24:a8:96:52:cd:95:89:1b:ea:b4:d0:41:9e:
         98:65:f3:95:b7:3b:37:af:bd:ef:e6:84:6b:5d:1d:f5:47:be:
         39:78:cb:e9:c1:9f:dd:1a:3d:6a:bb:da:06:76:9f:ab:51:c7:
         79:ff:7d:10:e5:06:0b:a0:67:b6:1f:2b:e3:a8:e0:d6:c1:a5:
         ca:e5:49:64:ab:2c:ae:34:dd:6c:63:a0:7f:7a:57:85:a4:a8:
         a7:f3:d9:26:85:74:5d:10:6d:9a:27:d5:02:cb:c7:e9:8d:c5:
         28:ff:8a:73:13:46:cb:4e:73:54:36:7b:ae:7a:bf:e2:96:da:
         66:69:04:ca:89:0a:36:e7:d9:81:35:4b:9e:96:48:7b:eb:d2:
         63:cd:eb:ff:5d:75:ac:65:b3:15:1b:41:20:bb:01:0f:7d:3c:
         50:f6:04:f3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUW9cu0NjU6HzpxPDqjbn29NZH1O0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDU3WhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ODk2MDIyYTBmOWY1NzgwMjVhYTg2OTUxNWVhMDVkZGE4
MWNkMTNhYzRlNmQ0N2JkNjNjYTQyZDQ0NDIwM2FlMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDx5D6/x0iu5qoLmKipFWVfAm7t4dCfHX5qhDbYCYWYB098
J6mQhJCGQ5wpnjoLpqEQDqdb8f5vjksGlc0zleQYKVqjMybQuBMRArnaqr5916ls
RICjsQ2X3g8DZ5gIU4YDr3vCTkMp3zF9IfgyXHqwLeSUAICIw1QDLQ8hMw3pJSet
An6omwFTQgAywGxh42vpNuoUvE2OdDG6hdkQqRTvBDeInNrYeWyLgVQA5ToOcdRt
ceh2etIjvk17nXeg6DurBNvrUM0FLfrcxCcKYGE6hHmV1R3dz7N/xIp/hTndB5BA
SKx8r5xlII3SFYmx/Aqej/jWIi7tn+sLvkEfYjcNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJAJnHgxvJ9fNFE3tCx2Ytn1bbHQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2Y1ZDE3MjdhLWViMmYtNGFlMC04ODFlLWM4ZmRjMzQ0Yjk1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD74AAwDQYJKoZIhvcNAQELBQADggEBAAoqlwvbW5wvQV0x0dwrq6qn
8ZwIg8XUy+gjldN78YOXTKhr5fN4a/8t+ocxEOh3ZjhYsl2DXTtVlqpQz1AraCpn
/8WZ0dewavxnDkWRjOhvnsaboDYuTfvsAxhyum1LJKiWUs2ViRvqtNBBnphl85W3
Ozevve/mhGtdHfVHvjl4y+nBn90aPWq72gZ2n6tRx3n/fRDlBgugZ7YfK+Oo4NbB
pcrlSWSrLK403WxjoH96V4WkqKfz2SaFdF0QbZon1QLLx+mNxSj/inMTRstOc1Q2
e656v+KW2mZpBMqJCjbn2YE1S56WSHvr0mPN6/9ddaxlsxUbQSC7AQ99PFD2BPM=
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:25:10 2026 by rpki-client